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CLAIMS 

1. A method for providing content identification within a media data 
stream comprising the steps of: 

5 receiving a data stream of media content; 

inserting content identification data at regular intervals within the media 
data stream. 

2. The method of claim 1 wherein the content identification data is 
10 inserted every frame. 

3. The method of claim 1 wherein the content identification data is 
digitally combined with a predetermined property of the data stream. 

15 4. The method of claim 1 for providing tamper resistant content 

identification within the media data stream, in which the step of inserting 
content identification data comprises the further steps of: 

extracting data relating to a predetermined property of the media data 
stream; 

20 combining the extracted data with content identification data; 

applying a digital signature to the combined data; and 
inserting the combined data and digital signature as secured content 
identification data into the data stream. 

25 5. The method of claim 4 in which the step of combining the 

extracted data with content identification data comprises the step of forming a 
hash code from the extracted data and the content identification data. 

6. The method of claim 1 in which the media data stream may 
30 comprise any one or more of pictures and audio or video data streams. 
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7. The method of claim 3 in which the predetermined property is 
any property of the media data stream that changes from data frame to data 
frame. 

5 8. The method of claim 7 in which the predetermined property 

comprises any one or more of: frame size, frame hash, transport stream 
identifier, clock signal, and continuity count. 

9. The method of claim 8 in which the predetermined property is a 
combination of frame size and frame hash. 

10. The method of claim 5 in which the step of applying a digital 
signature to the hash code further includes applying digital signatures of the 
originator of the media data stream and a certification authority. 

11. A method of transcoding a media data stream comprising the 
steps of: 

receiving a data stream of media content including embedded, secured 
content identification data, in which the secured content identification data 
incorporates data relating to a predetermined property of the media data 
stream; 

transcoding the media content of the data stream into a new format; 
extracting data relating to a predetermined property of the media data 
stream in its new format; 

extracting content identification data from the secured content 
identification data; 

combining the extracted data with the extracted content identification 

data; 

applying a digital signature to the combined data; and 
inserting the combined data and digital signature as re-secured content 
identification data into the data stream. 
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12. The method of claim 11 in which the new format of the data 
stream has a lower resolution or transmission / storage bandwidth than the 
original format of the data stream. 

5 13. The method of claim 11 in which the media content may 

comprise any one or more of pictures, audio, video data streams. 

14. The method of claim 11 in which the predetermined property is 
any property of the media data stream that changes from data frame to data 

10 frame. 

15. The method of claim 14 in which the predetermined property 
comprises any one or more of: frame size, frame hash, transport stream 
identifier, clock signal, and continuity count. 

15 

16. The method of claim 15 in which the predetermined property is a 
combination of frame size and frame hash. 

17. The method of claim 11 in which the step of applying a digital 
20 signature to the combined data further includes applying a digital signature of 

the transcoding device. 

18. The method of claim 17 in which the step of applying a digital 
signature to the combined data further includes the step of making available a 

25 corresponding public key of the transcoding device that is digitally signed by 
the originator of the content identification data. 

19. The method of claim 11 in which the step of combining the 
extracted data with the extracted content identification data further includes the 

30 step of modifying the extracted content identification data. 
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20. The method of claim 19 in which the step of modifying the 
extracted content identification data comprises including an indication of the 
new format of the transcoded data stream. 

21. The method of claim 19 in which the step of modifying the 
extracted content identification data comprises including an identity of a device 
performing the transcoding. 

22. A method of verifying the integrity of secured content 
identification data embedded in a media data stream, comprising the steps of: 

receiving a data stream of media content including embedded, secured 
content identification data, in which the secured content identification data 
incorporates data relating to a predetermined property of the media data 
stream; 

extracting first data relating to a predetermined property of the media 
data stream; 

extracting content identification data from the secured content 
identification data; 

extracting second data relating to the predetermined property from the 
secured content identification data; 

comparing the first data and the second data to verify the authenticity of 
the extracted content identification data. 

23. The method of claim 22 in which the step of extracting content 
identification data from the secured content identification data comprises the 
steps of: 

obtaining a public key of a content provider that secured the content 
identification data; and 

verifying an encrypted signature of the content provider using the public 

key. 
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24. The method of claim 23 in which the step of extracting content 
identification data from the secured content identification data comprises the 
steps of: 

obtaining a public key of a certification authority; 

verifying the authenticity of the public key of the content provider using 
the public key of the certification authority. 

25. The method of claim 22 in which the media data stream is 
received via a transcoding device, and in which the step of extracting content 
identification data from the secured content identification data comprises the 
steps of verifying that the transcoder device was authorised to modify the data 
stream by an originator of the content identification data. 

26. The method of claim 25 in which the step of extracting content 
identification data from the secured content identification data comprises the 
steps of: 

obtaining a public key of the transcoding device that secured the 
content identification data, the public key being digitally signed by the 
originator of the content identification data; 

obtaining a public key of the originator; 

verifying an encrypted signature of the originator using the public key of 
the originator, and thereby verifying the public key of the transcoder device; 

verifying the content identification information using the verified public 
key of the transcoder device. 

27. The method of claim 22 in which the media content may 
comprise any one or more of pictures, audio, video data streams. 

28. The method of claim 22 in which the predetermined property is 
any property of the media data stream that changes from data frame to data 
frame. 
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29. The method of claim 28 in which the predetermined property 
comprises any one or more of: frame size, frame hash, transport stream 
identifier, clock signal, and continuity count. 

5 30. The method of claim 29 in which the predetermined property is a 

combination of frame size and frame hash. 



31. Apparatus for providing content identification within a media data 
stream comprising: 
10 means for receiving a data stream of media content; 

means for inserting content identification data at regular intervals within 
the media data stream. 



32. The apparatus of claim 31 wherein the means for inserting 
15 comprises: 

a data extraction module for extracting data relating to a predetermined 
property of the media data stream; 

means for combining the extracted data with content identification data; 
an encryption module for applying a digital signature to the combined 
20 data; and 

a data merge module for inserting the combined data and digital 
signature as secured content identification data into the data stream. 

33. The apparatus of claim 32 in which the means for combining 
25 includes a hash function generator for forming a hash code from the combined 

data, the encryption module applying the digital signature to the hash code. 

34. Apparatus for transcoding a media data stream, comprising: 
means for receiving a data stream of media content including embedded, 

30 secured content identification data, in which the secured content identification 
data incorporates data relating to a predetermined property of the media data 
stream; 
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a transcoder module for transcoding the media content of the data 
stream into a new format; 

a data extraction module for extracting data relating to a predetermined 
property of the media data stream in its new format and for extracting content 
5 identification data from the secured content identification data; 

means for combining the extracted data with the extracted content 
identification data; 

an encryption module for applying a digital signature to the combined 
data; and 

io a data merge module for inserting the combined data and digital 

signature as re-secured content identification data into the data stream. 

35. Apparatus for verifying the integrity of secured content 
identification data embedded in a media data stream, comprising: 

15 means for receiving a data stream of media content including 

embedded, secured content identification data, in which the secured content 
identification data incorporates data relating to a predetermined property of the 
media data stream; 

a data extraction module for extracting first data relating to a 
20 predetermined property of the media data stream; 

a decryption module for extracting content identification data from the 
secured content identification data; and for extracting second data relating to 
the predetermined property from the secured content identification data; 

a compare module for comparing the first data and the second data to 
25 verify the authenticity of the extracted content identification data. 

36. A computer program product, comprising a computer readable 
medium having thereon computer program code means adapted, when said 
program is loaded onto a computer, to make the computer execute the 

30 procedure of any one of claims 1 to 30. 
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37. A computer program product, distributable by electronic data 
transmission, comprising computer program code means adapted, when said 
program is loaded onto a computer, to make the computer execute the 
procedure of any one of claims 1 to 30. 



